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ABSTRACT 


The  main  thrust  of  this  thesis  is  to  build  a  dynamic  model  of  a  Conunand  and 
Control  (C^)  system  and.  by  manipulating  various  aspects  of  the  model,  determine 
the  effects  of  Command  and  Control  Warfare  (C^W)  on  the  system.  The  model 
used  is  a  prototype  for  battle  damage  assessment  in  C^W.  A  description  of  how 
the  model  was  constructed  and  discussions  of  the  decisions  concerning  what  to 
model  and  of  the  difficulties  and  deficiencies  associated  with  the  model  are  also 
included. 

The  model  is  constructed  using  the  Design/CPN  and  Workflow  Analyzer 
software,  produced  by  Meta  Software.  It  consists  of  a  JTF  information  handling 
system  in  a  hostile  environment.  The  basis  for  this  model  is  an  Integrated 
Computer  Aided  Manufacturing  Definition  (IDEFO)  functional  flow  diagram  of  the 
same  system. 
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I .  INTRODUCTION 

A.  BACKGROUND 

Over  10,000  years  ago,  wars  were  fought  for  land 
ownership.  This  period  in  time  is  referred  to.  as  the  era  of 
agricultural  wars,  where  face-to-face  combat  was  the  basic 
method  of  warfare  used.  The  weapons  used  were  primitive  and 
relied  on  human  brute  force  to  achieve  their  goals.  Orders 
were  given  orally  and  hardly  ever  in  writing. 

The  industrial  revolution  brought  about  another  type  of 
warfare.  The  mass  production  of  goods  and  materials  led  to  a 
war  of  mass  destruction.  This  type  of  war  is  referred  to  as 
the  industrial  war  or  the  mechanized  war.  Weapons  were 
produced  to  destroy  entire  regions,  societies,  and  industrial 
centers . 

Nuclear  weapons,  space  assets,  advanced  computer 
capabilities  and  rapidly  growing  telecommunications  have 
brought  about  a  complex  and  formidable  danger  to  the 
warfighter.  Today's  warfighter  is  faced  with  a  technological 
war.  Wars  are  no  longer  being  fought  to  destroy  the  land  or 
other  physical  assets  of  the  enemy,  but  are  fought  to  destroy 
the  command  and  control  centers,  the  nerve,  of  the  enemy  by 
means  of  computer  viruses,  communications  breakdowns  and 
psychological  warfare,  by  means  of  the  media. 


1.  The  Need  for  Battle  Damage  Assessment 

Battle  Damage  «ft.ssessment  (BDA)  is  the  evaluation  of 
damage  sustained  during  an  attack.  It  includes  the  total 
number  of  lives  lost,  equipment  and  structural  damages  and  the 
degradation  of  information  or  communications  systems.  BDA  not 
only  is  conducted  for  one's  own  forces  but  those  of  hostile 
and  allied  forces  affected  by  the  attack.  The  definition  may 
seem  simple,  but  the  processes  or  methods  used  for  damage 
assessment  are  complex.  Therefore,  improved  methods  of 
conducting  BDA  are  required  to  keep  up  with  the  rapidly 
changing  face  of  war. 

Distorted  assessments  concinue  co  be  a  major  problem 

for  the  men  in  the  field,  not  to  mention  the  commander  trying 

to  get  a  timely  and  accurate  picture  of  the  battle  being 

fought.  The  commander  must  rely  heavily  upon  the  timely 

information  given  to  him  by  those  inspecting  the  battlefield. 

The  importance  of  accurate  BDA  during  Operation  Desert  Storm 

was  noted  by  General  Schwarzkopf: 

...too  much  optimism  could  prompt  us  to  launch  the  ground 
war  too  soon,  at  the  cost  of  many  lives;  too  much  pessimism 
could  cause  us  to  sit  wringing  cur  hands  and  moaning  that 
the  enemy  was  still  too  strong.  [Ref.  l:p.  499] 

2.  Traditional  Mathods  of  BDA 

During  both  eras  of  agricultural  and  industrial  wars, 
BDA  was  conducted  by  physical  sice  inspections.  The  damage 
was  then  estimated  by  the  obvious  visible  damage  to  equipment, 
land  and  structures.  The  damage  assessment  was  often  slow 


and  inaccurate. 


Modern  warfare,  an  electronic  warfare,  has  moved  the 

battle  from  the  land  to  the  heart  of  the  command  and  control 

center,  its  communications  links  and  computers.  Today,  the 

commanders  out  in  the  field  can  no  longer  rely  upon  those 

physical  inspections  conducted  because  computer  viruses  are 

being  utilized  by  both  hostile  and  friendly  forces  as  a  weapon 

to  “take  out"  the  opposition's  command  and  control. 

Viruses  may  be  introduced  into  the  computer  through  a 
variety  of  vehicles,  ranging  from  access  to  a  corrupt 
network  to,  potentially,  infection  from  a  clandestine 
computer  chip  on  an  expansion  card  or  other  peripherals. 
[Ref.  2:p.  19] 

B.  OVERVIEW  OF  COMHMID  AND  CONTROL  WARFARE  (C^W) 

The  definition  of  Coitmand  and  Control  Warfare  (C^W)  used 

by  the  Chairman  of  the  Joint  Chiefs  of  Staff  is  as  follows: 

Command  and  Control  Warfare:  The  integrated  use  of  oper¬ 
ations  security  (OPSEC) ,  military  deception,  psychological 
operations  (PSYOP) ,  electronic  warfare  (EW)  and  physical 
destruction,  mutually  supported  by  intelligence,  to  deny 
information  to,  influence,  degrade  or  destroy  adversary  C^ 
capabilities,  while  protecting  friendly  C^  capabilities 
against  such  actions.  [Ref.  3:p.  2] 

The  strategies  and  techniques  of  conducting  C’W  have 
changed  with  the  times.  Prior  to  the  publication  of  the 
Memorandum  of  Policy  No.  30  [Ref.  3],  C^W  was  referred  to  as 
Command,  Control,  and  Communication  Countermeasures  (C^M)  .  C^W 
now  focuses  more  on  how  wars  are  being  fought  and  supports  all 
three  levels  of  conflict:  strategic,  operational  and  tactical. 

C^W  incorporates  two  elements:  Counter-C^  and  C^ 

Protection.  Both  elements  implement  five  tools  (or  methods) 
which  support  each  other.  These  tools  are:  OPSEC,  military 
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deception,  PSYOP,  EW,  and  physical  destruction.  A  successful 
C^W  strategy  is  the  integration  of  the  five  tools  throughout 
the  planning,  execution,  and  termination  cycle  of  any 
operation . 

Counter-C^  is  defined  as: 

...to  prevent  effective  of  adversary  forces  by  denying 
information  to,  influencing,  degrading  or  destroying  the 
adversary  system.  [Ref.  3:p.  2] 

The  following  is  the  definition  of  Protection: 

. . .to  maintain  effective  of  won  forces  by  turning  to 
friendly  advantage  or  negating  adversary  effort  to, 
influence,  degrade,  or  destroy  the  friendly  . 

[Ref.  3,p.  2] 

A  quote  from  Mao  Tse-Tung  could  siimmarize  the  importance 

of  command  and  control  warfare.  It  is  as  follows: 

To  achieve  victory  we  must  as  far  as  possible  make  the  enemy 
blind  and  deaf  by  sealing  his  eyes  and  ears,  and  drive  his 
co’imanders  to  distraction  by  creating  confusion  in  their 
minds.  [Ref.  4,  p.  89] 

His  reference  to  the  "eyes  and  ears"  of  the  eneity  is 
essentially  the  command  and  control  center.  Creating  confu¬ 
sion  can  be  achieved  by  the  implementation  of  the  five  tools 
of  C^W  previously  mentioned. 

C .  PURPOSE 

The  scope  of  this  thesis  is  to  build  a  dynamic  model  of  a 
command  and  control  system  and  to  determine  the  effects  of  C^W 
on  that  system.  The  model  designed  for  the  experiment  is  a 
prototype  for  battle  damage  assessment  in  C^W.  The  effects  of 
C^W  are  modeled  by  manipulating  various  functions  and 
activities  of  the  model. 
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The  foundation  for  this  prototype  is  the  ANSER  model .  The 
ANSER  model  is  a  process  model  of  the  command  and  control 
information  needs  of  a  "generic"  Joint  Task  Force  Commander 
(JTFC) .  The  main  objective  of  the  model  is  to  focus  on  a  set 
of  functions  or  activities  and  determine  their  relationship 
with  the  Corporate  Information  Management  (CIM)  methodologies. 


5 


II .  THE  MODEL 


A.  THE  ANSER  MODEL 

Corporate  Information  Management  (CIM)  is  a  process  model 
which  focuses  on  the  management  methods  used  within  the 
Department  of  Defense.  CIM  is  a  dynamic  model  used  to  simu¬ 
late  the  flow  of  resources  through  various  processes.  It  is 
used  to  uncover  any  bottlenecks  or  any  idle  resources  within 
a  system.  It  could  also  be  used  to  establish  interactions, 
cost  and  resource  consumption  within  a  system. 

The  ANSER  model  is  a  result  of  the  Joint  Staff's  efforts 
to  c  "eate  a  process  model  using  the  CIM  methodologies.  The 
main  focus  of  the  ANSER  model  is  to  simulate  the  command  and 
control  needs  of  the  Joint  Task  Force  Commander  (JTFC) .  The 
JTFC  may  utilize  such  a  model  to  ensure  that  the  system  is 
being  used  efficiently.  It  is  a  useful  decisionmaking  tool  to 
the  commander,  for  he  can  see  the  problem  areas  in  his  system. 

B.  THE  C*  LOOP 

1.  Department  of  Defense  Definition  of  Commauad  euid 
Control 

The  Department  of  Defense  (DOD)  defines  command  and 
control  (C^)  as: 

t'he  exercise  of  authority  and  direction  by  a  purposely 
.esignated  commander  over  assigned  forces  in  the 
accomplishment  of  the  mission.  Command  and  control 
functions  are  performed  through  an  arrangement  of  personnel, 
equipment,  communications,  facilities,  and  procedures 
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employed  by  a  commander  in  planning,  directing, 
coordinating,  and  controlling  forces  and  operations  in  the 
accomplishment  of  the  mission.  [Ref.  5:pp.  77] 

This  definition  separates  into  a  collection  of 
functions  and  the  systems  of  people,  procedures,  and  equipment 
that  support  command.  This  study  first  looks  at  how  to  model 
the  functions  of  and  then  adds  the  systems  that  support 
these  functions. 

2.  Lawson's  Process 

Fundamentally  there  is  very  little  difference  be-tween 
the  system  used  by  most  forces  in  World  War  II  and  a  modern 
one  found  anywhere  in  the  world  today.  In  fact  a  gen-eric 
model  of  C^,  such  as  the  one  proposed  by  Joel  S.  Lawson,  would 
probably  be  as  applicable  to  the  system  used  by 
Alexander  the  Great  as  it  would  to  that  of  General 
Schwarzkopf . 

The  Lawson  model  (Figure  1)  uses  five  functions  to 
encompass  all  of  the  activities  that  take  place  within  a  C- 
system.  These  five  functions  are:  sense,  process,  compare, 
decide,  and  act.  The  sense  function  gathers  data  on  the 
environment  in  which  the  system  exists--including 

friendly,  allied,  and  hostile  forces,  terrain,  weather, 
political  happenings,  and  so  on.  The  process  function  groups 
this  data  together,  correlates  it,  and  then  filters  it  to 
provide  the  commander  with  useful  information  about  the 
environment.  The  compare  function  compares  and  contrasts  the 
existing  state  of  the  environment --the  relative  strengths. 


weaknesses,  positions,  etc. --with  the  desired  state,  the 
commander's  view  of  what  the  state  of  the  environment  should 
be.  The  decide  function  chooses  among  the  available  courses 
of  action  for  reconciling  the  two  states.  Finally  the  act 
function  translates  the  decision  into  action. 

3.  Using  Lawson's  Model 

Superimposing  Lawson's  model  onto  the  Anser  model  of 
a  Joint  Task  Force  (JTF)  [Ref.  6:pp.  5-55]  resulted  in  the 
separation  of  the  five  functions  into  two  categories:  those 
internal  to  the  JTF  and  those  external.  The  functions 
internal  to  the  JTF  are  process,  compare,  and  decide,  while 
sense  and  act  are 

external.  It  may  be  argued  that  both  sense  and  act  are  also 
internal  to  the  JTF;  however,  as  the  focus  of  this  study  is 
the  information  flow  internal  to  the  JTF  and  neither  of  these 
functions  are  an  integral  part  of  that  flow,  they  may  be 
safely  categorized  as  external. 

C.  THS  IDEFO  MODEL 

The  next  step  in  this  study  was  to  create  a  model  of  the 
activities  involved  in  each  function  using  the  X^^tegrated 
Computer  Aided  Manufacturing  Definition  (IDEF)  standard  for 
describing  systems.  The  activities  listed  in  the  Anser  model 
will  be  assigned  to  the  three  incernal  functions  and  then 
converted  to  an  IDEFO  model. 
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1 .  An  Omrvlaw  of  IDBFO 

IDEFO  IS  a  graphical  portrayal  of  the  processes  withir. 
an  organization.  It  shows  the  logical  interdependencies  if 


various  activities  but 

says 

nothing 

about 

the  time  fiov;. 

Hence 

one  can  determine 

the 

f unct ions 

that 

deal  with  each 

other. 

the  order  they  dc 

it.  i 

n,  and  what  is 

needed  by  each, 

but  nothing  can  be  detennined  about  how  long  each  takes  to 
perforin  its  activity. 

There  are  seven  definitions  essential  to  an 
understanding  of  an  IDEFO  model.  They  are: 

1.  Activity  -  named  process,  function,  or  task  having  one 
or  more  occurrences; 

2.  ICOM  -  an  acronym  for  Input,  Control,  Output,  and 
Mechanism; 

3.  Input  -  resources  consumed  by  the  activity; 

4.  Control  -  activity  blueprints,  plans  or  directives; 

5.  Output  -  activity  products; 

6.  Mechanism  -  tools  used  in  an  activity; 

7.  Decomposition  -  the  breaking  down  of  an  activity  into 
its  component  subactivities 

Using  the  above  definitions,  any  organization  can  be 
decomposed  into  its  component  activities  with  inputs, 
controls,  outputs,  and  mechanisms  required  for  each  activity. 
Thus  a  detailed,  but  static,  graphical  representation  is 
created.  This  was  already  accomplished  by  Anser  for  the  JTF 
so  that  all  that  remained  of  this  step  in  the  study  was  to 
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assign  activities  to  functions. 

2.  IDirO  Model  of  the  Loop 

In  their  report.  Anser  decomposed  the  JTF  as  far  as 
four  levels  below  the  top  level  diagram.  It  was  necessary  to 
determine  which  of  the  activities  and  on  which  levels  to 
assign  to  each  function  of  the  C‘  loop.  This  required  a 
careful  reading  of  the  activity  definitions  in  order  to 
perform  the  appropriate  matching.  As  an  example,  here  is  the 
definition  for  activity  A113  -  Evaluate  Impact: 

The  process  of  evaluating  the  impact  of  identified 
significant  events  within  their  environment  and  assessing 
the  current  and  future  effect  in  light  of  the  National 
Security  Strategy,  CINC's  Theater  Strategy  and  Objectives, 
and  the  JTF's  Operational  Objectives  and  mission. 

[Ref . 6 :p .  B-2 ] 

Careful  examination  of  this  definition  clearly  shows 
it  to  be  part  of  the  process  function.  Therefore,  it  was 
assigned  to  that  function.  Table  1  shows  an  example  of  the 
matrix  constructed  from  matching  the  activities  and  functions. 
The  entire  matrix  is  contained  in  Appendix  A. 


Table  1:  EXAMPLE  ASSIGNMENT  MATRIX 


Function 

Activities 

Process 

Alll,  A112,  A113 

A  careful  comparison  of  the  assignment  matrix  and  the 


ANSER  model  will  show  that  all  activities  after  A51  were 
excluded.  The  basis  for  this  was  the  categorization  of  those 
activities  as  belonging  to  the  act  function  and  hence  not 
germ.ne  to  this  study.  Again,  the  argument  could  be  made  that 


since  the  JTF  has  forces,  the  activities  which  govern  their 
employment  should  be  included  in  the  study.  However,  though 
information  handling  does  take  place  within  these  activities, 
they  are  not  a  basic  part  of  the  JTF  information  handling 
system.. 

This  is  a  good  point  to  discuss  the  measure  of  effec¬ 
tiveness  (MOE)  chosen  for  the  study.  Since  the  Commander, 
Joint  Task  Force  (CJTF)  Execute  Order  is  the  last  link  in  the 
internal  information  handling  chain  and  it  is  the  method  by 
which  the  CJTF  activates  the  forces  involved,  it  was 
determined  that  the  time  necessary  to  produce  the  Execute 
Order  was  the  best  MOE.  The  assumption  made  for  this  MOE  is 
that  the  order  will  take  longer  to  produce  if  the  C'  loop  has 
been  degraded. 

At  this  point  the  IDEFO  model  was  constructed  using 
Design/IDEF,  a  program  created  by  Meta  Software  Corporation. 
This  provided  a  static  model  of  the  JTF  information  system; 
however,  it  did  not  allow  study  of  the  behavioral  charact¬ 
eristics  of  the  system.  For  that,  a  tool  for  dynamic  repre¬ 
sentation  of  the  system  was  needed.  Petri  nets  filled  that 
.need . 

D.  THB  COLORED  PBTRI  MBT  (CPM)  MODEL 
1.  An  Overview  of  CPN 

A  Petri  net  is  a  tool  for  the  study  of  systems. 
Essentially  it  is  a  mathematical  representation  (model)  of  the 
system  to  be  studied.  Analysis  of  the  net  can  provide 
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information  on  the  structure  and  behavior  of  the  modeled 
system. 

Any  Petri  net  has  five  primitive  components:  tokens, 
places,  transitions,  inputs,  and  outputs.  A  token  is  an 
object  used  to  define  execution  of  the  Petri  net.  For  this 
study  a  "packet"  of  information  was  used.  A  place  is  a 
location  tokens  are  assigned  to  (or  reside  in) .  Transitions 
equate  to  activities,  processes,  or  functions.  The  "firing" 
of  transitions  moves  tokens,  while  the  arrival  of  tokens 
enables  the  firing  of  transitions.  Inputs  and  outputs  are 
functions  that  map  either  a  transition  to  a  set  of  places  or 
a  place  to  a  set  of  transitions. 

The  structure  of  a  Petri  net  is  of  the  form 
C  =  (P,T, 1,0) ,  where: 

1 .  C  =  the  Petri  net  structure 

2 .  P  =  the  set  of  places 

3.  T  =  the  set  of  transitions 

4.  I  =  the  input  functions 

5.  0  =  the  output  functions. 

These  are  the  "rules"  for  the  mathematical  representation  of 
the  system.  The  structure  of  a  fairly  simple  system  is  shown 
below: 

C  =  (P,T,I,0) 

P  =  {Pl/P2'P3/P4} 

T  =  {ti,t2} 

Ktj)  =  {Pi)  0(ti)  =  {P2,p3} 
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Ktj)  =  {Pz^Pj}  0(t2)  =  {P^}. 

The  structure  of  a  Petri  net  is  necessary,  but  a 
visual  representation  of  the  system  is  often  more  useful.  For 
visual  representation  there  is  the  Petri  net  graph,  which  is 
nothing  more  than  a  graphical  representation  of  the  structure. 
Figure  2  is  a  Petri  net  graph  of  the  structure  used  earlier. 
Note  that  it  is  easy  to  follow  and  gives  at  a  glance  all  the 
information  it  contains.  For  this  reason  most  applied  work  is 
done  using  the  graph  while  most  theoretical  work  is  done  using 
the  structure. 

Marking  takes  the  Petri  net  one  step  further  by 
assigning  tokens  to  places.  This  step  provides  a  snapshot  of 
the  model  at  a  given  moment.  Figure  3  is  the  marked  version 
of  the  Petri  net  used  before.  The  format  for  the  marked  Petri 
net  is  M  =  (C,u),  where: 

M  =  the  marked  Petri  net 

C  =  the  Petri  net  structure 

u  =  a  function  mapping  the  set  of  places,  P,  to  the  non¬ 
negative  integers  N. 

Hence,  the  marked  Petri  net  in  Figure  3  would  be: 

M  =  (C,u) 

C  =  (P,T,I,0)  u  =  (1,2, 0,0) 

P  =  {Pl/Pz/Ps/Pj 

T  =  {ti,t2} 

I(ti)  =  (Pi)  0(ti)  =  {P2,P3} 

I  (t2)  =  {P2.P3)  0(t2)  =  {P4}  . 
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P2 


Figure  3: Marked  Petri  Net 
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A  marked  Petri  net  looks  good  but  says  nothing  about 
the  tokens  or  the  purpose  of  the  model.  To  be  of  any  real 
use,  the  information  must  be  associated  with  the  tokens.  When 
this  is  done,  a  colored  Petri  net  (CPN)  is  the  result.  This 
was  the  next  step  to  be  performed  on  the  ANSER  JTF  model . 

2.  CPN  Model  of  the  Loop 

To  come  up  with  a  useful  model  it  was  necessary  to 
determine  what  a  token  would  represent,  what  time  unit  would 
be  used,  the  duration  of  each  activity,  and  any  special 
considerations  for  modeling  specific  situations,  such  as 
indecisiveness  and  C^W.  Early  on  it  was  determined  that  since 
the  focus  of  the  study  was  the  information  system,  the  token 
should  represent  a  "packet"  of  information  that  would  appear 
to  be  sufficient  to  make  a  decision  under  normal 
circumstances.  It  was  decided  that  in  order  to  keep  the  model 
as  flexible  as  possible,  the  time  unit  would  not  be  specified. 
Thus  the  distance  from  headquarters  and  the  availability  of 
communications  systems  can  both  be  modeled,  or  ignored,  with 
equal  facility.  The  assignment  of  activity  durations  were 
straightforward.  Using  Design/IDEF,  each  activity  was 
arbitrarily  assigned  a  duration  of  one  time  unit.  Then  the 
activities  within  each  function  were  lumped  together  into 
a  black  box  and  the  durations  summed.  This  sum  was  assigned 
to  the  black  box  of  each  function  as  its  total  duration. 
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The  decision  on  how  to  model  indecisiveness  and  C^W 
was  driven  by  the  software.  The  assignment  of  probabilities 
to  specific  paths  (outputs)  along  with  the  creation  of  dummy 
activities  was  the  method  used  to  model  indecisiveness  and 
C^W.  For  indecisiveness,  a  0.80  probability  was  assigned  to 
the  output  to  the  next  black  box  while  a  probability  of  0.20 
was  assigned  to  the  output  of  a  dummy  activity  with  a  duration 
equal  in  value  to  the  activity  from  which  the  output  came  from 
(Figure  4)  .  Modeling  C^W  required  a  more  complicated  form  and 
is  discussed  in  detail  in  the  next  section. 


Figure  4:  Model  for  Indecisiveness 
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E.  MODELING  WARFARE 

1.  Categories  o£  Attacks 

The  definition  of  C^W  decomposes  into  three  basic 
cate'.dOries  for  modeling  purposes.  They  are: 

1.  Attacks  against  the  information  before  the  system 
receives  it; 

2.  Attacks  against  the  systems  that  process  or  move  the 
information;  and 

3 .  Attacks  against  the  personnel  handling  the  information 
and  making  decisions  using  it . 

While  each  type  of  attack  is  different,  the  effect  of 
each  is  to  degrade  or  destroy  the  overall  systems 's  capability 
to  turn  information  into  a  usable  product  (an  execute  order  in 
this  case) .  Since  the  focus  is  on  the  effects  (as  opposed  to 
the  details  of  the  methods)  of  the  attack,  modeling  the 
effects  of  each  can  be  done  using  many  of  the  same  techniques 
for  all  of  them. 

2 .  Methodology 

The  basic  building  blocks  used  in  modeling  C^W  were 
the  same  as  those  used  in  modeling  indecisiveness; 
probabilities  and  dummy  activities.  First  each  activity  was 
decomposed  into  a  main  activity  and  a  series  of  dumny 
activities  (Figure  5) .  Probabilities  were  then  assigned  to 
each  output  to  reflect  the  uncertainty  of  success  of  an  attack 
of  a  specific  type.  The  basic  probabilities  were  0.80  to 
proceed  with  processing  and  0.20  to  seek  more  information. 
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As  it  was  possible  to  have  more  than  one  attack  at  a  time, 
there  were  probability  products.  These  products  were  reduced 
so  their  sum  would  be  25,  thus  ensuring  that  enough 
differences  would  show  up  during  the  simulation  runs. 

The  next  step  in  construction  of  the  model  was  the 
assignment  of  subtypes  of  mechanisms  to  the  appropriate 
activities.  This  assignment  would  allow  manipulation  of  the 
speed  of  processing.  Specifically,  subtype  DA  (Data  Attack) 
was  used  for  attacks  against  incoming  information,  subtype  CD 
(C^  Degradation)  was  used  for  attacks  against  the  systems  and 
subtype  PSY  (psyops)  was  used  for  attacks  directed  against  the 
personnel  involved. 

To  model  attacks  against  information  it  was  necessary 
to  add  a  dummy  activity  to  the  front  end  of  the  model  whose 
function  was  to  either  accept  or  reject  the  information 
received.  When  attacks  are  present,  the  speed  factor  of  the 
system  subtype  "DA",  which  is  assigned  to  the  activity, 
confirms  that  data  is  increased  (that  is,  it  will  take  longer 
to  perform  the  activity) .  If  the  simulator  determines,  using 
the  assigned  probabilities,  that  the  attack  was  successful, 
then  the  extra  time  is  accrued. 
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F.  EXPERIMENTAL  DESIGN 

1 .  Setup 

This  model  was  built  and  run  using  a  set  of  software 
produced  by  Meta  Software  Corporation:  Design/ IDEF, 
Design/CPN,  and  Work  Flow  Analyzer.  Two  Macintosh  Ilci 
computers  with  70Mb  of  RAM  were  used  as  the  platforms  for  the 
experiment,  each  running  Design/CPN  System  7. 

Due  to  the  limited  RAM  of  the  computers  only  ten  runs 
of  the  model  could  be  made  for  each  cycle  of  the  simulator. 
Additionally,  the  limited  RAM  also  excluded  use  of  the  Excel 
spreadsheet  as  an  output.  As  a  result,  each  cycle  required 
initializing  the  simulator,  running  the  model,  manually 
extracting  the  data,  and  clear'irg  the  report.  Finally,  at  the 
end  of  five  cycles,  the  levels  of  each  of  the  factors  would  be 
adjusted  as  required. 

2 .  Assunqptions 

Certain  assumptions  were  made  to  enable  the  use  of 
this  model.  Theses  assumptions  were: 

1.  No  action  can  be  taken  by  JTF  forces  without  orders; 

2.  Orders  are  issued  only  when  sufficient  information  is 
available;  and 

3.  The  CJTF  will  try  to  get  sufficient  information  to  issue 
orders . 

The  following  assumpcions  were  made  in  order  to  allow 
analysis  of  the  data: 

1.  All  samples  are  random,  samples  from  their  respective 
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populations ; 

2.  There  is  mutual  independence  among  the  various  samples; 
and 

3.  Distributions  are  assumed  to  be  identical. 

3 .  Statistical  Design 

To  ensure  the  assumption  of  normality  was  valid,  50 
runs  were  made  for  each  configuration.  There  were  three 
factors  (data  attack,  degradation,  and  psyops)  at  two 

levels  (1  or  2)  for  a  total  of  eight  configurations.  A 
balanced,  multifactor  ANOVA  was  made  on  the  data. 

4 .  Hypotheses 

Seven  null  hypotheses  were  formulated  to  test  the 
model.  They  are  as  follows: 

1.  Information  Attacks 

Information  attacks  have  no  effect  on  the  time  needed 
to  produce  the  CJTF  Execute  Order. 

2.  C'  Degradation 

degradation  has  no  effect  on  the  time  needed  to 
produce  the  CJTF  Execute  Order. 

3 .  Psyops 

Psyops  have  no  effect  on  the  time  needed  to  produce 
the  CJTF  Execute  Order. 

4.  Information  Attacks  And  C’  Degradation 

There  is  no  interaction  between  information  attacks 
and  C’  degradation. 
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5.  Information  Attacks  And  Psyops 

There  is  no  interaction  between  information  attacks 
and  psyops . 

6.  Degradation  And  Psyops 

There  is  no  interaction  between  degradation  and 
psyops . 

7.  Information  Attacks,  Degradation  And  Psyops 

There  is  no  interaction  between  all  three  factors 
together . 

The  alternate  hypotheses  are  the  converses  of  each  null 
hypothesis . 
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Ill .  SIMULATION  RUNS 


A.  RESULTS  OF  THE  SIMULATION  RUNS 

After  each  cycle  of  the  simulator,  the  time  to  produce  the 
execute  order  was  transferred  from  the  Excel-ready  output 
form,  used  by  Work  Flow  Analyzer,  to  a  data  collection  work¬ 
sheet.  From  there  the  data  was  transferred  to  a  Minitab 
worksheet  in  a  form  that  would  allow  a  balanced,  multi-factor 
Analysis  of  Variance  (ANOVA)  of  the  data.  The  three  factors 
and  the  output  of  the  model  were  each  assigned  a  column,  while 
each  row  of  the  worksheet  represented  one  run  of  the  model . 
Then  the  levels  one  and  two  were  assigned  to  each  factor, 
according  to  the  speed  factor  assigned  to  the  appropriate 
mechanism  subtype  for  that  run.  This  is  shown  in  Figure  6. 
For  example  row  one  of  Table  2  would  translate  as : 

DA  speed  =  1.0,  CD  speed  =  1.0,  and  PSY  speed  =  1.0,  resulting 
in  TIME  (to  produce  execute  order)  =  45. 
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Table  2: 

EXCERPT 

FORM 

MINITAB 

WORKSHEET 

Cl 

C2 

C3 

C4 

DA 

CD 

PSY 

TIME 

1 

i 

j. 

1 

45 

2 

1_ 

-1 

J. 

X 

82 

3 

1 

1 

X 

52 

4 

1 

1 

1 

45 

5 

1 

1 

1 

80 

6 

1 

1 

1 

45 

7 

1 

1 

1 

45 

8 

1 

1 

1 

50 

9 

X 

1 

1 

48 

10 

1 

1 

1 

45 

The  next  step  was  to  analyze  the  data  from  the  runs . 
Given  the  hypotheses  that  were  being  tested,  the  first  form  of 
the  ANOVA  test  was  DA*CD*PSY,  an  interaction  between  all  three 
factors.  The  values  of  interest  were  the  p-values  for  each 
factor  and  cross-products,  as  these  would  indicate  the  lowest 
value  for  which  a  given  hypothesis  could  be  rejected.  The 
results  of  the  first  ANOVA  are  shown  below  in  Tables  3  and  4. 


Table  3:  FIRST  ANOVA  TEST  INPUTS 


FACTOR 

TYPE 

LEVELS 

VALUES 

DA 

fixed 

2 

1  2 

CD 

fixed 

2 

1  2 

PSY 

fixed 

2 

1  2 
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Table  4:  FIRST  ANOVA  TEST  RESULTS 


SOURCE 

DF 

SS 

MS 

F 

P 

DA 

1 

65869 

65869 

55.24 

0.000 

CD 

1 

82398 

82398 

69.10 

0.000 

PSY 

1 

104039 

104039 

87.25 

0.000 

DA*CD 

1 

63 

63 

0.05 

0.818 

DA*PSY 

1 

9264 

9264 

7.77 

0.006 

CD*PSY 

-1 

± 

1541 

1541 

1.29 

0.256 

DA*CD* 

PSY 

1 

44 

44 

0.04 

0.847 

ERROR 

392 

467443 

1192 

TOTAL 

399 

730661 

The  factors  that  appeared  to  be  significant  at  this 
point  were  DA,  CD,  PSY,  and  DA*PSY.  The  p-value  for  each  was 
low  enough  to  virtually  assure  rejection  of  the  associated 
hypotheses.  Further  testing  was  required  to  ensure  that  each 
factor  was  truly  significant.  The  second  ANOVA  test  was  of 
the  form  DA*PSY  and  the  results  are  shown  in  Tables  5  and  6. 


Table  5:  SECOND  ANOVA  TEST  INPUTS 


FACTOR 

TYPE 

LEVELS 

VALUES 

DA 

fixed 

2 

1  2 

PSY 

fixed 

2 

1  2 
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Table  6:  SECOND  ANOVA  TEST  RESULTS 


SOURCE 

DF 

SS 

MS 

F 

P 

DA 

1 

65869 

65869 

47.30 

0.000 

PSY 

1 

104039 

104039 

74.71 

0.000 

DA*PSY 

1 

9264 

9264 

6.65 

0.010 

ERROR 

396 

551489 

1393 

TOTAL 

399 

730661 

Once  again  DA  and  PSY  appeared  clearly  to  be  signi¬ 
ficant  as  their  p-values  remained  0  (zero) .  On  the  other  hand 
there  was  a  slight  increase  in  the  p-value  for  DA*PSY. 
Nonetheless,  it  was  considered  significant  as  a  value  of  0.01 
is  usually  the  lowest  used,  and  the  hypothesis  can  be  rejected 
for  any  value  equal  to  or  greater  than  that.  The  only  test 
remaining  was  of  each  factor  taken  alone,  the  results  of  which 
are  shown  in  Tables  7  and  8. 


Table  7:  THIRD  ANOVA  TEST  INPUTS 


FACTOR 

TYPE 

LEVELS 

VALUES 

DA 

fixed 

2 

1 

2 

CD 

fixed 

2 

1 

2 

PSY 

fixed 

2 

1 

2 

Table  8:  THIRD  ANOVA  TEST  RESULTS 


SOURCE 

DF 

SS 

MS 

F 

P 

DA 

1 

65869 

65869 

54.53 

0 . 000 

CD 

1 

82398 

62398 

68.21 

0 . 000 

PSY 

1 

104039 

104039 

86.13 

0.000 

ERROR 

396 

478355 

1208 

TOTAL 

399 

730661 
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It  was  now  clear  that  all  three  factors  were  sig¬ 
nificant  by  themselves  as  was  the  interaction  of  DA  and  PSY. 
It  was  then  possible  to  decide  whether  or  not  to  reject  the 
hypotheses  previously  stated.  Based  on  the  above  results 
obtained,  the  following  decisions  were  made: 

1.  Information  Attacks 

Attacks  against  the  data  have  no  effect  on  the  time 
required  to  produce  the  CJTF  Execute  Order.  There¬ 
fore,  the  hypothesis  is  rejected.  Clearly  data 
attacks  did  affect  the  production  time  as  witnessed  by 
the  p-value  for  that  factor. 

2  .  Degradation 

degradation  has  no  effect  on  the  time  required  to 
produce  the  CJTF  Execute  Order.  Therefore,  the 
hypothesis  is  rejected.  CD  is  clearly  a  significant 
factor  based  on  the  ANOVA  tests. 

3 .  Psyops 

Psyops  have  no  effect  on  the  time  required  to  produce 
the  CJTF  Execute  Order.  Therefore,  the  hypothesis  is 
rejected.  Like  DA  and  CD,  PSY  is  clearly  a  signifi¬ 
cant  factor. 

4.  Information  Attacks  And  C^  Degradation 

There  is  no  interaction  between  data  attacks  and  C^ 
degradation.  Therefore,  the  hypothesis  is  NOT 
rejected.  The  ANOVA  tests  clearly  show  that  DA*CD 
is  not  a  significant  factor. 
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5.  Information  Attacks  And  Psyops 

There  is  no  interaction  between  data  attacks  and 
psyops.  Therefore,  the  hypothesis  is  rejected.  The 
ANOVA  test  shows  that  for  values  greater  than  or 
equal  to  0.01  this  was  a  significant  factor. 

6.  Degradation  And  Psyops 

There  is  no  interaction  between  degradation  and 
psyops.  Therefore,  the  hypothesis  is  NOT  rejected. 
CD*PSY  had  much  too  high  of  a  p-value  to  consider  it 
significant . 

7.  Information  Attacks,  Degradation,  And  Psyops 

There  is  no  interaction  between  data  attacks,  C'  deg¬ 
radation,  and  psyops.  Therefore,  the  hypothesis  is 
NOT  rejected.  Like  CD*PSY,  the  p-value  here  is  too 
high  to  conclude  that  this  cross  was  significant. 

The  rejection  of  four  of  the  hypotheses  yielded 
information  necessary  to  the  verification  of  the  experiment's 
design.  Their  relation  to  the  model  then  was  the  next  step  in 
the  study. 

B.  VARIATIONS  OF  THE  MODEL 
1.  First  Variation 

The  first  variation  attempted  for  this  study  involved 
changing  the  probabilities  used  at  the  outputs  of  the 
activities  that  determine  whether  an  attack  of  a  specific  type 
is  successful  or  not.  In  the  original  model,  the  basic 
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probability  of  success  for  an  attack  was  0.20  and  the 
probability  of  an  unsuccessful  attack  was  0.80.  In  this  vari¬ 
ation,  the  probabilities  were  changed  to  0.3  0  and  0.00 
respectively  and  then  all  probability  products  were  recomputed 
(the  actual  numbers  assigned  were  5,  2,  2,  and  1).  What 

difference  would  this  make  as  far  as  the  analysis  and  the 
hypotheses?  This  was  the  question  to  be  verified  based  on  the 
data  shown  in  Tables  9  and  10  for  the  DA*CD*PSY  ANOVA. 


Table  9:  DA*CD*PSY  ANOVA  TEST  INPUTS 


FACTOR 

TYPE 

LEVELS 

VALUES 

DA 

fixed 

2 

1 

2 

CA 

fixed 

2 

1 

2 

PSY 

fixed 

2 

1 

2 

Table  10:  DA*CD*PSY  ANOVA  TEST  RESULTS 


SOURCE 

DF 

SS 

MS 

F 

P 

DA 

1 

118267 

118267 

101.00 

0.000 

CD 

1 

111957 

111957 

95.61 

0.000 

PSY 

1 

260917 

260917 

222.83 

0.000 

DA*CD 

1 

14448 

14448 

12.34 

0.000 

DA*PSY 

1 

243 

243 

0.21 

0.649 

CD  -PSY 

1 

31791 

31791 

27.15 

0.000 

DA*CD* 

PSY 

1 

5761 

5761 

4.92 

0.027 

ERROR 

392 

459000 

1171 

TOTAL 

399 

1002384 

30 


There  were  some  differences  noted.  DA*CD  and  CD*PSY 
were  shown  to  be  significant,  and  the  three-way  interaction 
was  significant  for  a  p-value  greater  than  or  equal  to  0.027 
(the  commonly  used  p-value  is  0.05)  .  These  results  led  to  the 
rejection  of  all  but  one  hypothesis.  The  only  one  not 
rejected  is  that  there  is  no  interaction  between  data  attacks 
and  psyops . 

It  was  clear  that  changing  the  output  probabilities 
would  influence  the  significance  of  the  interactions.  Would 
changing  the  probabilities  used  to  model  indecisiveness  have 
a  similar  effect?  This  was  the  next  question  to  be  verified. 

2 .  Second  Variation 

The  output  probabilities  were  returned  to  0.20  and 
0.80  while  the  probabilities  used  for  indecisiveness  were 
changed  to  0.90  for  the  go-ahead  and  0.10  to  get  more 
information.  The  results  of  the  DA*CD*PSY  ANOVA  are  shown  in 
Tables  11  and  12. 


Table  11:  DA*CD*PSY  ANOVA  TEST  INPUTS 


FACTOR 

TYPE 

LEVELS 

VALUES 

DA 

fixed 

2 

1  2 

CD 

fixed 

2 

1  2 

PSY 

fixed 

2 

1  2 
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Table  12:  DA*CD*PSY  ANOVA  TEST  RESULTS 


SOURCE 

DF 

SS 

MS 

F 

P 

DA 

1 

73197 

73197 

70.80 

0.000 

CD 

1 

105657 

105657 

102.20 

0.000 

PSY 

J. 

114075 

110.34 

0 .000 

DA*CD 

1 

7788 

7788 

7.53 

0.006 

DA*PSY 

1 

5235 

5235 

5.06 

0 . 025 

CD*PSY 

1 

1509 

1509 

1.46 

0.228 

DA -CD* 
PSY 

1 

348 

348 

0.34 

0.562 

ERROR 

392 

405257 

1034 

TOTAL 

399 

713067 

In  this  variation  only  two  interactions  are  signif¬ 
icant,  DA*CB  and  DA'^PSY.  Clearly  changing  the  indecisiveness 
probabilities  had  some  effect  as  noted  by  the  decreased  p- 
values  for  DA*CD  and  DA*CD*PSY  to  that  of  the  original  model. 
The  variation  of  the  indecisiveness  probabilities  did  not  have 
the  same  effect  on  the  interactions  as  changing  the  output 
probabilities.  The  relationship  between  the  output 

probabilities  may  have  been  the  cause  of  the  interactions  in 
this  model;  however,  this  relationship  is  beyond  the  scope  of 
this  study  and  will  be  left  to  any  follow-on  research.  The 
final  step  to  this  study  was  to  determine  the  validity  of  the 
experiment . 

3 .  Validity  of  Experiment 

The  purpose  of  the  model  design  was  to  vary  the  speed 
factor  of  the  specific  mechanism  subtypes  which  would  randomly 
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affect  the  time  required  to  produce  the  CJTF  Execute  Order. 
If  the  design  were  correct,  then  each  subtype  (identified  as 
a  factor  in  ANOVA  testing)  would  be  significant  and  the 
hypothesis  of  the  opposite  effect  would  be  rejected.  This  is 
the  case  for  this  model .  Analysis  of  the  experimental  data 
verified  the  accuracy  of  the  experiment's  design. 

The  design  of  the  model  was  such  that  the  factors 
would  be  additive,  as  verified  by  the  large  values  obtained 
for  the  TIME  column.  An  unexpected  result  was  discovered  even 
though  there  was  no  attempt  to  build  in  interactions  between 
the  factors.  The  unexpected  result  was  that  of  an  interaction 
between  DA  and  PSY,  which  is  considered  a  synergistic  effect. 
The  reason  for  this  is  unclear,  but  it  prompted  the  idea  of 
varying  parts  of  the  design  to  see  what  would  happen. 
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IV.  CONCLUSION 


In  this  study  a  prototype  model  for  battle  damage 
assessment  in  warfare  was  built.  The  purpose  was  to 
provide  an  easier  avenue  for  research  into  the  effects  of  C^W 
in  an  unclassified  environment.  Commercial  off-the-shelf 
software  was  used  that  allowed  a  study  of  the  dynamic  behavior 
of  a  JTF  information  handling  system  in  a  hostile  environment. 

The  model  worked  well  in  as  much  as  it  performed  as  it  was 
designed  to  and  is  of  simple  construction.  It  is  not  as 
flexible  as  was  hoped  for,  but  that  is  due  to  its  construction 
as  opposed  to  any  inherent  limitation  of  the  software. 
Research  in  this  area  and  with  this  model/software  shouldn't 
stop  here.  There  are  several  possibilities  for  follow-on 
research.  One  possibility  is  to  generalize  the  model  for 
force  structures  other  than  the  JTF.  This  could  prove  useful 
in  a  wider  range  of  situations.  A  second  area  would  be  to 
marry  the  model  with  simulated  (or  actual)  methods  of 
measuring  communications.  A  different  MOE  might  be  discovered 
or  another  way  to  infer  the  one  used  in  this  study.  Another 
possibility  would  be  to  assign  "true"  values  to  the  subtypes 
used  for  data  attack,  C’  degradation,  and  psyops .  Done  in 
connection  with  a  more  detailed  breakout  of  the  force's 
structure  (including  performance  data  on  systems  and  number  of 
personnel  for  each  activity),  this  could  be  extremely  useful. 
An  extension  of  chis  would  be  to  study  the  cost  of  C^W  to 
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enemy  forces  or  the  cost  of  C^W  defense  to  friendly  forces. 
A  final  possibility  is  to  incorporate  the  model  into  automated 
mission  planning.  This  might  prove  to  be  very  interesting  if 
it  can  be  done. 

warfare  will  only  grow  in  the  importance  it  plays  in 
modern  warfighting.  Proper  preparation  requires  continued 
research  outside  the  classified  environments  where  it  is 
usually  conducted.  This  model  and  its  successors  can  provide 
the  tools  for  that  research. 
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APPENDIX  A  -  ACTIVITY  ASSIGNMENT  MATRIX 


Function 

Activities 

Process 

Alll,  A112,  A113 

Compare 

A21,  A22 

Decide 

A23,  A311,  A312,  A313, 

A3211,  A3212,  A3213,  A3214, 
A3215,  A3216,  A322,  A323, 
A3311,  A3312,  A3313,  A3314, 
A3315,  A3316,  A332,  A333, 
A341,  A342,  A343,  A411,  A412, 
A413,  A414,  A421,  A422,  A423, 
A43,A51 
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APPENDIX  B  -  XDEFO  MODEL 


tl  lilUl  IN 


MMliR 

INPUT 


CJTF 

fixmilfi 

Ottlnr 


NODI  :  At  I  Mil  i;:  DICIDI'ONACIION  INIIMIII  U; 
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APPENDIX  C  -  EXPERIMENTAL  DATA 
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